CVE-2026-90622

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-90622
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-90622.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-90622
Published
2026-09-14T03:30:13Z
Modified
2026-09-17T08:07:07Z
Severity
  • 1.9 (Low) CVSS_V4 - CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P CVSS Calculator
Summary
GNU libredwg Layer Encoding dwg.spec DWG_TABLE null pointer dereference
Details

A security flaw has been discovered in GNU libredwg 0.13.4. This impacts the function DWG_TABLE of the file src/dwg.spec of the component Layer Encoding. Performing a manipulation results in null pointer dereference. The attack needs to be approached locally. The exploit has been released to the public and may be used for attacks. Upgrading to version 0.14 will fix this issue. The patch is named f5b548c4c1697d66c3dabd0f6a49280a14365a3a. The affected component should be upgraded. The FIELD_HANDLE macro itself is NULL-safe (emits null_handle) - only the two raw zeroing assignments added by 27118c40 ("encode: also disable LAYER.material") dereferenced a NULL material handle; the fix restores the file's existing if (_obj->style) guard convention for material.

Database specific 
{
    "cna_assigner": "VulDB",
    "cwe_ids": [
        "CWE-404",
        "CWE-476"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/90xxx/CVE-2026-90622.json"
}
References

Affected packages

Git / github.com/libredwg/libredwg

Affected ranges

Type
GIT
Repo
https://github.com/libredwg/libredwg
Events
Introduced
e3774bd4020fcfebb68150361db74b8b34d170fe
Fixed
f5b548c4c1697d66c3dabd0f6a49280a14365a3a
Fixed
d9468ae948b8f07a08efa756c19f8916052358c0
Database specific
Show details 
{
    "extracted_events": [
        {
            "introduced": "0.13.4"
        },
        {
            "last_affected": "0.13.4"
        }
    ],
    "source": [
        "AFFECTED_FIELD",
        "REFERENCES"
    ]
}

Affected versions

0.*
0.13.4
0.13.4.7969
0.13.4.7974
0.13.4.7976
0.13.4.7985
0.13.4.7998
0.13.4.8001
0.13.4.8014
0.13.4.8018
0.13.4.8028
0.13.4.8036
0.13.4.8043
0.13.4.8051
0.13.4.8055
0.13.4.8085
0.13.4.8091
0.13.4.8104
0.13.4.8112
0.13.4.8115
0.13.4.8118
0.13.4.8123
0.13.4.8129
0.13.4.8131
0.13.4.8140
0.13.4.8144
0.13.4.8149
0.13.4.8160
0.13.4.8163
0.13.4.8166
0.13.4.8168
0.13.4.8169
0.13.4.8171
0.13.4.8174
0.13.4.8178
0.13.4.8187
0.13.4.8198
0.13.4.8200
0.13.4.8214
0.13.4.8216
0.13.4.8229
0.13.4.8230
0.13.4.8231
0.13.4.8234
0.13.4.8236
0.13.4.8237
0.13.4.8241
0.13.4.8246
0.13.4.8249
0.13.4.8252
0.13.4.8263
0.13.4.8268
0.13.4.8270
0.13.4.8273
0.13.4.8278
0.13.4.8284
0.13.4.8285
0.13.4.8293
0.13.4.8294
0.13.4.8295
0.13.4.8302
0.13.4.8304
0.13.4.8313
0.13.4.8317
0.13.4.8321
0.13.4.8336
0.13.4.8343
0.13.4.8348
0.13.4.8351
0.13.4.8356
0.13.4.8360

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-90622.json"
vanir_signatures 
[
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "49767515012856523006609786846141487675",
                "51767973309089573731138741627418469522",
                "214988644504213162965813640952238262990",
                "244819296756283961456692824590706746832",
                "27844949856869863672095217557809784032",
                "77896253088770974522687231449032865388",
                "109656386444620635452392358778299269116",
                "296031323750994905362176623140475984053",
                "106201200356465986227145837673662370733",
                "30256074524972750250787441305293718266",
                "173369055911681301747166990024197824583",
                "143621292742105292688096803105989929264",
                "65876926228280999514100252927459455022",
                "85392031684084465774002464460570711921",
                "249238180479009043757627070605456909292",
                "195222699048597012469761422123501115447"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2026-90622-9d8b7cb7",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/libredwg/libredwg/commit/d9468ae948b8f07a08efa756c19f8916052358c0",
        "target": {
            "file": "src/encode.c"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "154512130852018455397856659198690717106",
                "51876481842413898283512797170439118054",
                "174184467050061406361915063095242200094",
                "72521053116087091797231805787808258915",
                "294587100473962440125218262153547687185",
                "291013262779701407238566580163244165335",
                "286715408555221545764630641579777262070",
                "188660135417106434958253696063144996382",
                "251312105046776457484298978991698236668",
                "95784509257409776765300152242340662557",
                "173539188606416070312364628183834824913",
                "249782971859245451613310168160955920048",
                "226235201698424972492719238058069981173"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2026-90622-d1ac7042",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/libredwg/libredwg/commit/d9468ae948b8f07a08efa756c19f8916052358c0",
        "target": {
            "file": "examples/dwgfuzz.c"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "268448865954434003822748246748691671176",
            "length": 5110
        },
        "id": "CVE-2026-90622-d6d3b436",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/libredwg/libredwg/commit/d9468ae948b8f07a08efa756c19f8916052358c0",
        "target": {
            "file": "examples/dwgfuzz.c",
            "function": "main"
        }
    }
]
vanir_signatures_modified 
"2026-09-17T08:07:07Z"